Design/Logic Flaw

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox...

Code injection

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to access sensitive user data...

Code injection

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. Processing an image may lead to arbitrary code execution...

CVE-2023-42886

CVE-2023-42886 is an out-of-bounds read in Apple macOS components (notably CoreServices) that could lead to unexpected app termination or arbitrary code execution. Technical details across connected docs show a fix via improved bounds checking, with patches in macOS Sonoma 14.2, macOS Ventura 13....

CVE-2023-42899

CVE-2023-42899 concerns an issue in Apple software where processing an image may lead to arbitrary code execution due to improved memory handling. The fixed products/versions include macOS Sonoma 14.2, macOS Ventura 13.6.3, macOS Monterey 12.7.2, iOS 16.7.3 and iOS 17.2, iPadOS 16.7.3 and iPadOS ...

CVE-2023-42914

The issue was addressed with improved memory handling. This issue is fixed in macOS Sonoma 14.2, iOS 17.2 and iPadOS 17.2, watchOS 10.2, macOS Ventura 13.6.3, tvOS 17.2, iOS 16.7.3 and iPadOS 16.7.3, macOS Monterey 12.7.2. An app may be able to break out of its sandbox...

CVE-2023-42914

CVE-2023-42914 is an Apple sandbox-related issue addressed by improved memory handling. Affected platforms include macOS Ventura 13.6.3, macOS Monterey 12.7.2, macOS Sonoma 14.2, iOS 16.7.3 and 17.2 (and iPadOS 16.7.3 and 17.2), watchOS 10.2, and tvOS 17.2. The fixed versions indicate a sandbox e...

PT-2023-28631 · Apple · Macos Monterey +5

Name of the Vulnerable Software and Affected Versions: macOS Monterey versions prior to 12.7.2 macOS Ventura versions prior to 13.6.3 iOS versions prior to 17.2 iOS versions prior to 16.7.3 iPadOS versions prior to 17.2 iPadOS versions prior to 16.7.3 macOS Sonoma versions prior to 14.2...

PT-2023-28629 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.7.2 macOS versions prior to 13.6.3 macOS versions prior to 14.2 Description: A use-after-free issue was addressed with improved memory management. This issue allows a local attacker to potentially elevate their...

PT-2023-7960 · Apple · Apple Macos

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 14.2 macOS Ventura versions prior to 13.6.3 macOS Monterey versions prior to 12.7.2 Description: The issue is related to insufficient protection of registration data in the AppleEvents component of macOS, which may all...

SUSE CVE-2017-7165

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit"...

WordPress Gutenberg plugin <= 12.7.1 - Stored Cross-Site Scripting (XSS) vulnerability

Stored Cross-Site Scripting XSS vulnerability discovered by Ben Bidner in WordPress Gutenberg plugin versions = 12.7.1. Solution Update the WordPress Gutenberg plugin to the latest available version at least 12.7.2...

Design/Logic Flaw

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

CVE-2021-32076 Access Restriction bypass vulnerability via referrer spoof - Business Logic Bypass

Access Restriction Bypass via referrer spoof was discovered in SolarWinds Web Help Desk 12.7.2. An attacker can access the 'Web Help Desk Getting Started Wizard', especially the admin account creation page, from a non-privileged IP address network range or loopback address by intercepting the HTT...

SolarWinds Web Help Desk 安全漏洞

Solarwinds Web Help Desk is a suite of help desk and asset management software from Solarwinds USA. The software supports features such as centralized knowledge base, IT asset management, project and task management. A security vulnerability exists in SolarWinds Web Help Desk 12.7.2, which can be...

PT-2021-19656 · Solarwinds · Solarwinds Web Help Desk

Name of the Vulnerable Software and Affected Versions: SolarWinds Web Help Desk version 12.7.2 Description: A security issue was discovered, allowing access restriction bypass via referrer spoof. An attacker can access the "Web Help Desk Getting Started Wizard", specifically the admin account...

CVE-2020-8113

GitLab 10.7 and later through 12.7.2 has Incorrect Access Control...

PT-2020-19951 · Gitlab · Gitlab

Name of the Vulnerable Software and Affected Versions: GitLab versions 10.7 through 12.7.2 Description: The issue is related to incorrect access control. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents whe...

GitLab EE Insecure Privilege Vulnerability (CNVD-2020-14338)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. GitLab EE 8.9 - 12.7.2 suffers from an insecure privilege...

GitLab EE Incorrect Access Control Vulnerability (CNVD-2020-13700)

GitLab is an open source application developed using Ruby on Rails that implements a self-hosted Git project repository that can be accessed through a web interface for public and private projects.GitLab EE is GitLab Enterprise Edition. An incorrect access control vulnerability exists in GitLab E...